Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/N-mBobanuHOGDUyJ1f1weBIlNos.roa
File: N-mBobanuHOGDUyJ1f1weBIlNos.roa (raw, json)
Hash identifier: /pDvpkMOk81D/NwhL997/Qg4oGVehD6bgqkBV4TNvoM=
Subject key identifier: 37:E9:81:A1:B6:A7:B8:73:86:0D:4C:89:D5:FD:70:78:12:25:36:8B
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 018C6A6225BBAD085A5F0D65E2772C28D6ED
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/N-mBobanuHOGDUyJ1f1weBIlNos.roa
Signing time: Thu 14 Dec 2023 22:11:06 +0000
ROA not before: Thu 14 Dec 2023 22:11:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34458
IP address blocks: 185.100.171.0/24 maxlen: 24
185.100.168.0/24 maxlen: 24
46.20.104.0/24 maxlen: 24
185.169.222.0/24 maxlen: 24
185.169.223.0/24 maxlen: 24
46.20.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6a:62:25:bb:ad:08:5a:5f:0d:65:e2:77:2c:28:d6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Dec 14 22:11:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37e981a1b6a7b873860d4c89d5fd70781225368b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d0:e8:8c:ae:75:9d:76:2e:a7:fd:39:9b:06:
f5:e4:9b:5a:b2:d5:19:22:ab:6c:27:55:6b:66:bb:
38:ee:ac:cd:cd:37:13:ca:87:25:aa:f3:0f:64:35:
62:9c:53:d2:d6:55:bf:99:01:4d:e6:80:cd:83:06:
89:06:47:5d:53:69:21:ba:49:03:90:b2:98:6b:2a:
2c:76:bc:b7:25:df:aa:dc:38:f8:37:5b:5e:21:70:
75:21:45:43:a7:8d:e1:a6:fd:5a:98:eb:ae:18:d3:
b2:67:90:e1:db:1b:63:9e:5f:f4:f6:86:bd:84:d9:
ac:67:37:de:a9:23:1c:63:78:23:79:9b:0b:1f:c3:
d5:b2:78:93:3e:b1:cd:f2:43:08:3a:9b:8f:42:56:
c4:63:62:5c:1b:ab:be:31:e9:58:e4:72:7c:85:a6:
e5:3c:2b:b1:df:03:c3:89:92:78:81:9b:75:92:90:
d1:ba:18:23:a9:4b:71:37:8b:a2:aa:09:74:52:23:
db:03:37:9c:dd:13:7c:ee:9d:9c:6d:56:fa:74:ed:
7b:c5:a7:97:3b:f2:b2:cb:49:ea:f1:19:a2:52:42:
d0:81:ac:d7:a9:00:52:ba:81:32:7e:4f:26:9e:b2:
cf:78:2b:81:2b:a3:5d:f2:0e:6b:d3:14:11:a8:d5:
8d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E9:81:A1:B6:A7:B8:73:86:0D:4C:89:D5:FD:70:78:12:25:36:8B
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/N-mBobanuHOGDUyJ1f1weBIlNos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.101.0/24
46.20.104.0/24
185.100.168.0/24
185.100.171.0/24
185.169.222.0/23
Signature Algorithm: sha256WithRSAEncryption
28:e5:9a:c4:16:1f:a5:72:bd:02:48:5f:c0:74:bd:b7:a2:38:
74:c7:e5:0e:9c:7b:27:0d:27:63:44:50:ba:9c:5d:31:d1:d8:
45:c4:12:4a:9e:4e:af:b4:35:98:42:15:9e:6e:a2:fb:8e:cd:
8c:41:d7:08:99:fb:8e:a0:e6:50:0f:94:c4:fe:21:48:f8:6c:
e5:32:f3:d3:3d:49:20:12:e1:56:b7:21:6d:44:46:d6:b8:13:
fd:41:82:fb:74:52:55:e2:9a:15:af:a7:2a:06:09:3e:93:80:
5f:6a:2b:24:f9:2d:10:67:52:dd:73:5f:cf:0f:24:b6:08:a5:
d3:7e:a6:6f:fa:14:9d:16:b5:08:b4:6e:72:e8:24:10:b6:98:
51:05:86:ba:ee:1e:5b:8e:f8:42:e8:ea:4f:78:5d:cd:6c:ef:
98:75:67:f1:ff:db:97:ea:52:13:ac:57:9c:e3:36:ec:d0:eb:
13:8c:31:51:f5:3f:f6:00:07:6f:13:23:74:37:20:ae:cc:97:
b5:5d:57:bb:1b:52:61:da:96:a9:15:05:8e:58:76:ee:79:95:
68:3a:42:f1:cd:fc:08:41:bb:26:59:3f:20:01:08:90:c4:89:
7b:44:de:f5:b1:02:bc:fe:98:44:82:2b:8a:4b:15:65:69:72:
87:f5:76:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:19:11 2025 by rpki-client